Set dsaparam for quicker generation of dhparam

This commit is contained in:
Bram Prieshof
2020-10-08 13:37:36 +02:00
parent 3247114a9e
commit 01fac52e23

View File

@@ -13,7 +13,8 @@ curl --retry 7 --retry-delay 5 -s "$mrepo"/raw/branch/"$mbranch"/conf/acme.sh.en
echo '. "/opt/acmesh/acme.sh.env"' >> ~/.bashrc echo '. "/opt/acmesh/acme.sh.env"' >> ~/.bashrc
echo '42 0 * * * root "/opt/acmesh/acme.sh" --cron --home "/opt/acmesh/" --config-home "/etc/acmesh/data" > /dev/null' >> /etc/crontab echo '42 0 * * * root "/opt/acmesh/acme.sh" --cron --home "/opt/acmesh/" --config-home "/etc/acmesh/data" > /dev/null' >> /etc/crontab
openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 4096 openssl dhparam -dsaparam -out /etc/acmesh/certs/ssl-dhparams.pem 4096
#openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 4096 #uses "strong" primes instead of DSA
#openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 2048 #use for quick generation, only for testing #openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 2048 #use for quick generation, only for testing
/opt/acmesh/acme.sh --home "/opt/acmesh/" --config-home "/etc/acmesh/data" --upgrade /opt/acmesh/acme.sh --home "/opt/acmesh/" --config-home "/etc/acmesh/data" --upgrade